PT-2025-22221 · Linux+5 · Linux Kernel+5
Published
2025-05-09
·
Updated
2026-04-20
·
CVE-2025-37960
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.12
Description
A vulnerability in the Linux kernel has been resolved. The issue occurs in the memblock double array() function when increasing the array size and the slab is not yet available. A call to memblock find in range() is used to reserve/allocate memory, but the range returned may not have been accepted, resulting in a crash when booting an SNP guest. The vulnerability can be mitigated by calling accept memory() on the memory range returned before the slab is available.
Recommendations
For Linux kernel versions prior to 6.12, apply the patch that calls accept memory() on the memory range returned before the slab is available, adjusting the accept memory() call to specify 'start + size' for 'end' when applying to kernels prior to v6.12.
Exploit
Fix
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu